{"metadata": {"vulnerability": "CVE-2026-11903", "count": 26, "kinds": {"milestone": 7, "sighting": 5, "kev": 0, "other": 14}}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0226", "record": "NCSC-2026-0226", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-10T15:50:46.983Z", "date_only": false, "value": "2026-06-10T15:50:46.983Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-11903", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-07-08T00:00:00Z", "date_only": false, "value": "2026-07-08T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-11903", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-07-08T00:00:00Z", "date_only": false, "value": "2026-07-08T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-11903", "record": "FKIE_CVE-2026-11903", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-07-08T14:00:00Z", "date_only": false, "value": "2026-07-08T14:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / ProgressSoftware", "record": "CVE-2026-11903", "field": "containers.cna.datePublic"}, {"timestamp": "2026-07-08T14:19:16.759Z", "date_only": false, "value": "2026-07-08T14:19:16.759Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-11903", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-07-08T14:19:16.759Z", "date_only": false, "value": "2026-07-08T14:19:16.759Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / ProgressSoftware", "record": "CVE-2026-11903", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-08T15:16:25Z", "date_only": false, "value": "2026-07-08T15:16:25Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-J526-4HHW-J4MR", "record": "GHSA-J526-4HHW-J4MR", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-07-08T15:16:25.470Z", "date_only": false, "value": "2026-07-08T15:16:25.470", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-11903", "record": "FKIE_CVE-2026-11903", "field": "published"}, {"timestamp": "2026-07-08T15:32:02Z", "date_only": false, "value": "2026-07-08T15:32:02Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-J526-4HHW-J4MR", "record": "GHSA-J526-4HHW-J4MR", "field": "published"}, {"timestamp": "2026-07-08T15:32:02Z", "date_only": false, "value": "2026-07-08T15:32:02Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-J526-4HHW-J4MR", "record": "GHSA-J526-4HHW-J4MR", "field": "modified"}, {"timestamp": "2026-07-08T17:37:53.229Z", "date_only": false, "value": "2026-07-08T17:37:53.229147Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq5nvsx5n62g", "record": "CVE-2026-11903", "field": "creation_timestamp", "uuid": "54dd3705-a354-4ac1-9196-c1015f6aa5f4", "content": "CVE-2026-11903 - Stored XSS in MOVEit Transfer Ad Hoc module\nCVE ID : CVE-2026-11903\n \n Published : July 8, 2026, 3:16 p.m. | 1\u00a0hour, 58\u00a0minutes ago\n \n Description : Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Progress ...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq5nvsx5n62g"}, {"timestamp": "2026-07-08T20:15:14.552Z", "date_only": false, "value": "2026-07-08T20:15:14.552622Z", "kind": "sighting", "label": "Seen", "source": "https://cyber.gc.ca/en/alerts-advisories/progress-security-advisory-av26-678", "record": "CVE-2026-11903", "field": "creation_timestamp", "uuid": "f698e240-2346-4e27-8d91-ef819a7e1af3", "url": "https://cyber.gc.ca/en/alerts-advisories/progress-security-advisory-av26-678"}, {"timestamp": "2026-07-09T00:00:00Z", "date_only": true, "value": "2026-07-09", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0856", "record": "CERTFR-2026-AVI-0856", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-07-09T03:55:41.919Z", "date_only": false, "value": "2026-07-09T03:55:41.919Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-11903", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-07-09T03:55:41.919Z", "date_only": false, "value": "2026-07-09T03:55:41.919Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-11903", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-09T11:30:31.606Z", "date_only": false, "value": "2026-07-09T11:30:31.606894Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mq7jtsygg62k", "record": "CVE-2026-11903", "field": "creation_timestamp", "uuid": "75e92401-28b1-4a60-9a52-817fc9d7ee44", "content": "Progress patched three MOVEit Transfer flaws, including a stored XSS bug (CVE-2026-11903). No exploitation is confirmed. Update now.\n\n#MOVEit #MOVEitTransfer #StoredXSS #XSS #CVE #ProgressSoftware #PatchNow #InfoSec", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mq7jtsygg62k"}, {"timestamp": "2026-07-10T00:00:00Z", "date_only": false, "value": "2026-07-10T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0856", "record": "CERTFR-2026-AVI-0856", "field": "last_revision_date"}, {"timestamp": "2026-07-10T00:00:00Z", "date_only": false, "value": "2026-07-10T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0856", "record": "CERTFR-2026-AVI-0856", "field": "initial_release_date"}, {"timestamp": "2026-07-10T00:00:00Z", "date_only": false, "value": "2026-07-10T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0856", "record": "CERTFR-2026-AVI-0856", "field": "revisions.0.revision_date"}, {"timestamp": "2026-07-10T14:01:59.527Z", "date_only": false, "value": "2026-07-10T14:01:59.527", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-11903", "record": "FKIE_CVE-2026-11903", "field": "lastModified"}, {"timestamp": "2026-07-13T08:19:08.462Z", "date_only": false, "value": "2026-07-13T08:19:08.462928Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0226", "record": "NCSC-2026-0226", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-07-13T08:19:08.462Z", "date_only": false, "value": "2026-07-13T08:19:08.462928Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0226", "record": "NCSC-2026-0226", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-07-13T08:19:08.462Z", "date_only": false, "value": "2026-07-13T08:19:08.462928Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0226", "record": "NCSC-2026-0226", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-08-01T16:07:06.888Z", "date_only": false, "value": "2026-08-01T16:07:06.888927Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrztzlmdh22y", "record": "CVE-2026-11903", "field": "creation_timestamp", "uuid": "46ab58bb-af9f-4107-878d-5b1b4e18321b", "content": "\ud83d\udccc CVE-2026-11903 - Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Progress MOVEit Transfer (Ad Hoc module).\n\nThis ... https://www.cyberhub.blog/cves/CVE-2026-11903", "url": "https://bsky.app/profile/cyberhub.blog/post/3mrztzlmdh22y"}, {"timestamp": "2026-08-05T19:54:49.195Z", "date_only": false, "value": "2026-08-05T19:54:49.195574Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3msecmdqkcc2v", "record": "CVE-2026-11903", "field": "creation_timestamp", "uuid": "745b2be6-8251-4dc2-9487-938308024591", "content": "\u300cMOVEit Transfer\u300d\u306b\u8907\u6570\u8106\u5f31\u6027 - \u6700\u65b0\u7248\u3078\u66f4\u65b0\u3092\n\nProgress Software\u306f\u3001\u30d5\u30a1\u30a4\u30eb\u8ee2\u9001\u30bd\u30ea\u30e5\u30fc\u30b7\u30e7\u30f3\u300cMOVEit Transfer\u300d\u306b\u8106\u5f31\u6027\u304c\u5224\u660e\u3057\u3001\u4fee\u6b63\u3092\u884c\u3063\u305f\u3053\u3068\u3092\u660e\u3089\u304b\u306b\u3057\u305f\u3002\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u5f37\u304f\u63a8\u5968\u3057\u3066\u3044\u308b\u3002\n\n\u540c\u793e\u306f\u73fe\u5730\u6642\u95932026\u5e747\u67088\u65e5\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u60c5\u5831\u3092\u516c\u958b\u3057\u30013\u4ef6\u306e\u8106\u5f31\u6027\u300cCVE-2026-11903\u300d\u300cCVE-2026-10698\u300d\u300cCVE-2026-10699\u300d\u306b\u3064\u3044\u3066\u660e\u3089\u304b\u306b\u3057\u305f\u3082\u306e\u3002\n\n\u300cCVE-2026-11903\u300d\u306f\u3001\u30a2\u30c9\u30db\u30c3\u30af\u30e2\u30b8\u30e5\u30fc\u30eb\u306b\u5224\u660e\u3057\u305f\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\u306e\u8106\u5f31\u6027\u3002\u60aa\u7528\u306b\u306f\u8a8d\u8a3c\u304c\u5fc5\u8981\u3060\u304c...", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3msecmdqkcc2v"}]}